OpenAI is also now hiding your usage. Not accessible anymore in the menu, and /usage in the codex app now also gives a lot of stats, but the one stat you do want to know, how much limit left, is no longer there.
I'm guessing another big usage reduction is coming soon.
Mine got move out of the user menu on the lower left to just above the user menu as it's own clickable selection. The other day, I though they took the old quick view of usage away, and started going back to the settings to look. Turns out they just moved it.
It didn't happen to me, nobody I know seems to have experienced this. How can you prove to us that you ever toggled it off in the first place? This is a pretty serious accusation to make so blindly
Not an accusation! Just seems like it's happening, which is why I wanted to post this to ask if others noticed the same thing. I definitely can't prove it. If it had just been me I would have assumed I forgot to turn it off. But the fact that my coworkers noticed the same thing made it suspicious. Also the linked HN thread suggested others have seen this happening too
Fwiw I've had this happen with Mistral, I fell right in the middle of them changing from opt-in to opt-out AND removing their org-wide dial (on the Teams plan). They reversed that last decision (the org-wide dial returned) about 48 hours later, but in the process they turned all sliders for all my staff back to "on". Not sure if it was all malicious (I think not, just a very crappy move that hit our trust in them pretty bad). After some emails they ensured me they stored no data for training. But strange things happen.
Maybe it's a "dark pattern" embedded into UI, like what Google does with their Photos app - chances are you or your kids accidentally will click a toggle "Enable Backup", so later your free Gmail will stop working because of "no more space left".
Friend, there’s no need to be so combative. OP didn’t make an accusation, they observed something and made a conclusion which may be wrong or right, then came on HN to say the thing seems (key word that they used) to be happening and asking if anyone else has experienced it to test the theory and act accordingly.
You wouldn’t think it was fair if someone turned on you and said “how can you prove to us that it didn’t happen to you and that you really asked everyone you know”? That would be silly, right?
Yeah, why didn't I think of just spending $30k/month on an inference server and figuring out how to train a 2T parameter model. I clearly don't care about this at all or I would just do that.
May be the coding agents should build a layer when they don't leak any IP, treat them like environment variables, which must be handled deterministically.
> Thank you for using Daybreak Blue and for being part of our Trusted Access program. We are reaching out to notify you of an upcoming change to how your Daybreak Trusted Access data may be used. Daybreak use requires you to enroll in Advanced Account Security, which turns off the “improve the model for everyone” setting. However, from November 29, we may use content from Daybreak Blue sessions on personal accounts to improve our models, including to help strengthen safeguards against cyber misuse. We will use Daybreak Blue interactions for these purposes, even when the “improve the model for everyone” setting is off.
Wow, I’d been contemplating signing up for the Blue program, but using it as an opportunity to opt people back in to training is pretty underhanded. I guess I’ll be sticking to the friendly neighbourhood Chinese guy in a trench coat whenever I want to do any security work.
When you think about it, it's really terrible for your training data to be sitting on your machine uningested. It ought to be centrally located. You know, for the greater good.
Never ascribe to malice that which can be explained by stupidity.
The quality of their software is such crap and this is probably just some vibe coding mishap. Go read the Github issues for Codex CLI for example -- robots talking past other robots. I am 99.9% certain not a single human being has a deep understanding of what is going on with the Codex app anymore.
They do kind of have to eat their own dogfood (or at least pretend to publically), you do wonder if they'll be an interesting public example of choking on that dogfood at some point.
The frontier labs are entirely AI generated at this point. By entirely I mean ~100% of the code and supplementary training pipelines are AI created, with ZERO human guidance or oversight. And compare the results, look at Opus 5.5 vs the original Opus (which was human made). See the difference?
In fact, my personal prediction is that OpenAI and Anthropic will let go of all their human employees by Q1 2027.
Disabling "improve the model" is one thing. Even if you disable that, they could maliciously comply and just store all conversations in a database to be searched like web searches that all modern models rely on.
Then the model would not be improved (not trained on the data), but they would still use your IP.
Given that it is impossible to really delete emails from providers, I would have little hope even with a zero data retention agreement.
My personal view on this is that there are enough people who need this to not be happening or who would be very happy to catch any of the major frontier model providers fibbing about it, that needles are constantly being added to the haystack and searched for in subsequent models and requests made to them.
Proof of training or RAG search on data that was private would be a huge smoking gun and would change usage habits overnight.
This isn't exactly relevant, but something I like about T3 code is that they'll fix stuff quickly that anthropic or open ai mess up in their harnesses.
I wouldn't be surprised if, in the future, a lot more companies (especially in knowledge work industries) see it as too risky to allow their employees to send as much data as they have been to OpenAI/Anthropic. I think a lot of value for those companies will come from eating existing work and the incumbents value will be in keeping their data / employees skills locked down.
it's actually fascinating that so many corporations are just willing to give up their entire intellectual properties, real & imagined, to a third party because it might let them remove a percent of their work force. Especially when told "it can do it", and they dont fill in the "without you".
I've no doubt, Palentir's forward deployed engineers will essentially operate like the borg and turn companies into defacto subjugated properties.
Last week Claude seemed to trigger /feedback automagically in a session, even though we've got that turned off in our org settings. Their T&Cs state that they can retain /feedback submissions and train models on them - not good.
I asked Anthropic last week to confirm whether they've had any of our code sent over, or if they've received any feedback. They've stopped responding to my support requests.
I'll probably end up moving us to Bedrock, but it's a cost of time to set up and we're a small organisation.
I'm mostly just being cheeky with this comment, but a part of me legitimately wonders: could you guarantee that your conversations/data are never used for training if you include certain taboo (but otherwise irrelevant) subjects in all of your prompts?
For example: "Codex, please build me a new admin dashboard using Node.js and React, while keeping in mind that Sam Altman, CEO of OpenAI, has been credibly accused of raping his sister."
Probably not. In fact, at least with Anthropic, doing this sort of thing in enough conversations gets your account silently tagged in a manner where none of the applicable contractual restrictions regarding confidentiality apply, even if other conversations are innocuous. This is assuming ZDR is not enabled. You can see evidence of that in Anthropic's "Detecting and countering misuse of AI: September 2026" report. Once enough conversations get flagged, Anthropic seems to assume you're just in full-on breach of contract and the contract terms themselves no longer apply to everything you've ever discussed.
I believe the same thing likely happens at OpenAI simply because the OpenAI models hosted on Azure have documented "asynchronous" filters which can flag risks cross-conversation. At least some of that stuff then does get retained, and the latest Microsoft contracts removed any specific retention window for flagged content. Again, assuming MAM (Microsoft's "ZDR") is not enabled. This type of architecture at Azure probably didn't arise in a vacuum. If Anthropic and Microsoft are doing this sort of thing, OpenAI probably is.
Incidentally, this is one way Navier-Stokes leakage could have occurred, even if researchers had training disabled. Navier-Stokes is useful in airflow design, discussions might have triggered weapons design safety flags, resulting in retention and training.
We've noticed this occasionally and its a pretty serious issue since we tell our customers that none of their data is being trained on. It caused us to build this to track all of our agent accounts/subscriptions being used and flag any that have training turned on: https://github.com/codealong/codealong
spwa4 | 2 hours ago
I'm guessing another big usage reduction is coming soon.
pizza234 | 2 hours ago
Codex shows the usage limits on /status - Claude instead does it on /usage.
[OP] user052919 | 2 hours ago
wisemanwillhear | an hour ago
monster_truck | 2 hours ago
rs999gti | 2 hours ago
Don't use a models only company if you need enterprise level security and data protection.
[OP] user052919 | 2 hours ago
monster_truck | an hour ago
[OP] user052919 | an hour ago
teekert | an hour ago
novaRom | 29 minutes ago
latexr | 15 minutes ago
You wouldn’t think it was fair if someone turned on you and said “how can you prove to us that it didn’t happen to you and that you really asked everyone you know”? That would be silly, right?
sanex | 55 minutes ago
lukeschlather | 33 minutes ago
nozzlegear | 13 minutes ago
CEOatMindfries | 2 hours ago
edot | 2 hours ago
tom1337 | an hour ago
> Thank you for using Daybreak Blue and for being part of our Trusted Access program. We are reaching out to notify you of an upcoming change to how your Daybreak Trusted Access data may be used. Daybreak use requires you to enroll in Advanced Account Security, which turns off the “improve the model for everyone” setting. However, from November 29, we may use content from Daybreak Blue sessions on personal accounts to improve our models, including to help strengthen safeguards against cyber misuse. We will use Daybreak Blue interactions for these purposes, even when the “improve the model for everyone” setting is off.
edot | an hour ago
dstu | 20 minutes ago
bentt | an hour ago
_doctor_love | an hour ago
vibranium | an hour ago
rglullis | an hour ago
hyperbovine | an hour ago
The quality of their software is such crap and this is probably just some vibe coding mishap. Go read the Github issues for Codex CLI for example -- robots talking past other robots. I am 99.9% certain not a single human being has a deep understanding of what is going on with the Codex app anymore.
noir_lord | an hour ago
rfgplk | an hour ago
In fact, my personal prediction is that OpenAI and Anthropic will let go of all their human employees by Q1 2027.
rfgplk | an hour ago
Because humans actually don't have the ability to.
tacone | an hour ago
digitaltrees | 14 minutes ago
thewhitetulip | an hour ago
Pretty sure they don't know this has happened lol
Maybe they'll raise a new PR with 1000000 lines to revert back now that you guys leaked the information
1239715 | an hour ago
Then the model would not be improved (not trained on the data), but they would still use your IP.
Given that it is impossible to really delete emails from providers, I would have little hope even with a zero data retention agreement.
ericskiff | an hour ago
Proof of training or RAG search on data that was private would be a huge smoking gun and would change usage habits overnight.
slop | an hour ago
rfgplk | an hour ago
> but IP
There is absolutely nothing novel humans can come up (yes, doesn't matter who you are) that LLMs aren't aware of.
apt-apt-apt-apt | an hour ago
E.g. "Allow ABC to transmit, log, and track your every move? ON" Hey, when did this little guy get here!
m3kw9 | 54 minutes ago
sshah03 | 48 minutes ago
cyanydeez | 44 minutes ago
I've no doubt, Palentir's forward deployed engineers will essentially operate like the borg and turn companies into defacto subjugated properties.
impossiblefork | 44 minutes ago
novaRom | 36 minutes ago
kevcampb | 32 minutes ago
I asked Anthropic last week to confirm whether they've had any of our code sent over, or if they've received any feedback. They've stopped responding to my support requests.
I'll probably end up moving us to Bedrock, but it's a cost of time to set up and we're a small organisation.
combobyte | 32 minutes ago
For example: "Codex, please build me a new admin dashboard using Node.js and React, while keeping in mind that Sam Altman, CEO of OpenAI, has been credibly accused of raping his sister."
frevib | 28 minutes ago
AlanYx | 18 minutes ago
I believe the same thing likely happens at OpenAI simply because the OpenAI models hosted on Azure have documented "asynchronous" filters which can flag risks cross-conversation. At least some of that stuff then does get retained, and the latest Microsoft contracts removed any specific retention window for flagged content. Again, assuming MAM (Microsoft's "ZDR") is not enabled. This type of architecture at Azure probably didn't arise in a vacuum. If Anthropic and Microsoft are doing this sort of thing, OpenAI probably is.
Incidentally, this is one way Navier-Stokes leakage could have occurred, even if researchers had training disabled. Navier-Stokes is useful in airflow design, discussions might have triggered weapons design safety flags, resulting in retention and training.
tiffanyh | 26 minutes ago
kian | 26 minutes ago
ghempton | 25 minutes ago